diff --git a/codefresh/Chart.lock b/codefresh/Chart.lock
index 8de3456a2c..00c9fa9929 100644
--- a/codefresh/Chart.lock
+++ b/codefresh/Chart.lock
@@ -148,12 +148,12 @@ dependencies:
   version: 0.49.76
 - name: argo-platform
   repository: oci://quay.io/codefresh/charts
-  version: 1.3169.1-onprem-d65a019
+  version: 1.3169.1-onprem-915b48a
 - name: argo-hub-platform
   repository: oci://quay.io/codefresh/charts
   version: 0.1.18
 - name: cf-oidc-provider
   repository: oci://quay.io/codefresh/charts
   version: 0.0.15
-digest: sha256:cae4ba166e0a91d195af3df797c43294a9d2b1de2771524a4fb2d04946babd59
-generated: "2025-03-04T10:59:18.787343+03:00"
+digest: sha256:416dcda251f5cd35df121c7beb2a922e581177f0fcdbe54e486bd3130a1eb835
+generated: "2025-03-07T17:14:47.941403+03:00"
diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml
index f5572c2680..82ae853d5a 100644
--- a/codefresh/Chart.yaml
+++ b/codefresh/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 description: Helm Chart for Codefresh On-Prem
 name: codefresh
-version: 2.6.8
+version: 2.6.9
 keywords:
   - codefresh
 home: https://codefresh.io/
@@ -15,21 +15,11 @@ appVersion: 2.6.0
 annotations:
   # artifacthub.io/prerelease: "true"
   artifacthub.io/alternativeName: "codefresh-onprem"
-  artifacthub.io/containsSecurityUpdates: "true"
+  # artifacthub.io/containsSecurityUpdates: "true"
   # supported kinds are added, changed, deprecated, removed, fixed and security.
   artifacthub.io/changes: |
-    - kind: security
-      description: "Miscellaneous security updates (27.02.2025)"
     - kind: fixed
-      description: "Fixed removing a user with assigned SSO configuration that does not exist on the platform"
-      links:
-        - name: JIRA Issue
-          url: https://codefresh-io.atlassian.net/browse/CR-27590
-    - kind: fixed
-      description: "Fixed unassigning removed SSO configuration for a user"
-      links:
-        - name: JIRA Issue
-          url: https://codefresh-io.atlassian.net/browse/CR-27590
+      description: "Optional CACHE_PASSWORD env var for argo-platform (api-graphql/promotion-orchestrator)"
 dependencies:
   - name: cf-common
     repository: oci://quay.io/codefresh/charts
@@ -247,7 +237,7 @@ dependencies:
     repository: oci://quay.io/codefresh/charts
     condition: argo-platform.enabled
   - name: argo-platform
-    version: "1.3169.1-onprem-d65a019"
+    version: "1.3169.1-onprem-915b48a"
     repository: oci://quay.io/codefresh/charts
     condition: argo-platform.enabled
   - name: argo-hub-platform
diff --git a/codefresh/README.md b/codefresh/README.md
index c60571ea58..01d2194799 100644
--- a/codefresh/README.md
+++ b/codefresh/README.md
@@ -1,6 +1,6 @@
 ## Codefresh On-Premises
 
-![Version: 2.6.8](https://img.shields.io/badge/Version-2.6.8-informational?style=flat-square) ![AppVersion: 2.6.0](https://img.shields.io/badge/AppVersion-2.6.0-informational?style=flat-square)
+![Version: 2.6.9](https://img.shields.io/badge/Version-2.6.9-informational?style=flat-square) ![AppVersion: 2.6.0](https://img.shields.io/badge/AppVersion-2.6.0-informational?style=flat-square)
 
 Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/getting-started/intro-to-codefresh/) to Kubernetes.
 
diff --git a/codefresh/tests/misc/misc_test.yaml b/codefresh/tests/misc/misc_test.yaml
new file mode 100644
index 0000000000..b454c3d005
--- /dev/null
+++ b/codefresh/tests/misc/misc_test.yaml
@@ -0,0 +1,27 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/helm-unittest/helm-unittest/master/schema/helm-testsuite.json
+suite: Misc tests
+templates:
+  - charts/argo-platform/templates/**/*.yaml
+tests:
+  - it: argo-platform api-graphql should have empty CACHE_PASSWORD when no .Values.global.redisPassword or .Values.global.redisPasswordSecretKeyRef is provided
+    template: charts/argo-platform/templates/api-graphql/workload.yaml
+    set:
+      global.redisPassword: ""
+    asserts:
+      - notContains:
+          path: spec.template.spec.containers[0].env
+          content:
+            name: CACHE_PASSWORD
+          any: true
+
+  - it: argo-platform promotion-orchestrator should have empty CACHE_PASSWORD when no .Values.global.redisPassword or .Values.global.redisPasswordSecretKeyRef is provided
+    template: charts/argo-platform/templates/promotion-orchestrator/workload.yaml
+    set:
+      global.redisPassword: ""
+    asserts:
+      - notContains:
+          path: spec.template.spec.containers[0].env
+          content:
+            name: CACHE_PASSWORD
+          any: true
+